You’d have to create a new route and make sure it’s guarded against anyone but staff and the current user from seeing it. Probably a lot more complex than serializing it where you are.
I’m thinking you can do this via something like so:
add_to_serializer(:user, :manager_status) {
return object.manager_status if object.admin || object.staff
}
Off the top of my head you may have to do a dance to pull in the current user object and check for a match.